revoltchat / backend

Monorepo for Revolt backend services.
https://developers.revolt.chat/api/
Other
1.23k stars 140 forks source link

bug: Invisible users can be unmasked #375

Open hermitoff opened 1 month ago

hermitoff commented 1 month ago

What happened?

Let's consider the situation where I set my presence to "Invisible" in the Revolt client. When we make the API call to https://api.revolt.chat/users/ID_HERE, the API returns "presence": "Invisible" instead of something like "Offline". This could pose a privacy issue for many users.

Image